Commit Graph

1363 Commits

Author SHA1 Message Date
Metasploit 4793f28e28 Bump version of framework to 5.0.12 2019-03-14 10:06:42 -07:00
h00die a0b1ca1767 detect unifi in ssh sessions 2019-03-12 20:35:32 -04:00
Metasploit 1588928b44 Bump version of framework to 5.0.11 2019-03-07 10:06:39 -08:00
Brent Cook 656ef8f970 Land #11533, Fix credential reporting service lookups 2019-03-06 20:13:41 -06:00
Brent Cook 841c07a42c restore rescue for now 2019-03-06 19:35:12 -06:00
Brent Cook 4f08d1e864 Fix credential reporting service lookups.
Noted by @actuated, auxiliary/scanner/ipmi/ipmi_dumphashes was displaying an error when run against an IPMI endpoint that had a common hash. This was due to the services lookup in the database not extracting the first element of the results array.

```
[-] Auxiliary failed: NoMethodError undefined method `id' for #<Array:0x000055615614b970>
[-] Call stack:
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:27:in `block (2 levels) in create_cracked_credential'
[-]   /home/bcook/.rvm/gems/ruby-2.6.1@metasploit-framework/gems/activerecord-4.2.11/lib/active_record/relation/delegation.rb:46:in `each'
[-]   /home/bcook/.rvm/gems/ruby-2.6.1@metasploit-framework/gems/activerecord-4.2.11/lib/active_record/relation/delegation.rb:46:in `each'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:25:in `block in create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/core.rb:166:in `data_service_operation'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:15:in `create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/auxiliary/report.rb:26:in `create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:317:in `report_cracked_cred'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:244:in `block (2 levels) in run_host'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:237:in `each'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:237:in `block in run_host'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:100:in `each'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:100:in `run_host'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:111:in `block (2 levels) in run'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/thread_manager.rb:106:in `block in spawn'
[*] Auxiliary module execution completed
```
2019-03-06 17:08:34 -06:00
Matthew Kienow 6bcdda4bd1 Add entry to autoload RemotePayloadDataService 2019-03-06 13:41:08 -05:00
Matthew Kienow 63c1903032 Remove empty file 2019-03-06 13:11:34 -05:00
Matthew Kienow b658cf5d76 Use data_service_operation block to perform work 2019-03-06 12:11:27 -05:00
Aaron Soto 822f5357a2 Land #10675, DB manager for payloads: Resolve conflicts, add 'create!' to trigger database write 2019-03-04 14:58:03 -06:00
Metasploit 1979b18c0a Bump version of framework to 5.0.10 2019-02-28 10:07:33 -08:00
Metasploit 3871e45196 Bump version of framework to 5.0.9 2019-02-21 21:30:00 -08:00
Metasploit a3d0c93ff7 Bump version of framework to 5.0.8 2019-02-21 10:07:03 -08:00
Metasploit f895ebccc3 Bump version of framework to 5.0.7 2019-02-14 10:10:20 -08:00
Brent Cook 930d1fb78a Land #11351, many new John the Ripper module improvements 2019-02-13 03:05:14 -06:00
Metasploit 127c891950 Bump version of framework to 5.0.6 2019-02-07 10:04:24 -08:00
Metasploit 804c441425 Bump version of framework to 5.0.5 2019-02-01 13:44:12 -08:00
Metasploit 7633c2832a Bump version of framework to 5.0.4 2019-01-31 10:05:02 -08:00
h00die da27c3eeae centralize hash to jtr formatting 2019-01-30 16:24:05 -05:00
Matthew Kienow d078fcd87c Land #11270, fix miscellaneous loot issues 2019-01-25 19:15:14 -05:00
h00die 9930edf704 jtr modernizations 2019-01-25 14:07:24 -05:00
James Barnett 9e3a39bcf9 Dont try to process empty loot 2019-01-25 12:34:52 -06:00
Metasploit 9e06040efe Bump version of framework to 5.0.3 2019-01-24 10:06:14 -08:00
Jeffrey Martin fa7c7fc956 keep wordlist.to_file() backwords compatible 2019-01-23 10:52:49 -06:00
Brendan Coles 444555d3be Land #11261, Add maximum word length to JtR wordlist generation 2019-01-20 04:14:57 +00:00
Metasploit c808cbe050 Bump version of framework to 5.0.2 2019-01-17 20:41:51 -08:00
James Barnett 42c9553283 Dont do a separate lookup for loot.host, use the included JSON
This is just a temporary change. Eventually we should be doing separate
lookups for associated objects as that is the RESTful way of doing it.
Implementing this now to prevent extra load on the server until we can
put a better system in place of doing multiple lookups with a single call.
2019-01-15 12:47:37 -06:00
h00die 4d847e97fc ... over -1 2019-01-14 22:41:11 -05:00
h00die 509b4e979d max_length -1 2019-01-14 22:28:46 -05:00
h00die 2c02dbc8a6 add max_length to wordlist generation 2019-01-14 22:20:33 -05:00
James Barnett e168458861 Make calls to get the associated host when getting loot 2019-01-14 15:51:51 -06:00
Metasploit 16f152f6e3 Bump version of framework to 5.0.1 2019-01-10 09:41:50 -08:00
Brent Cook f125526e09 Land #11207, implement db_import for web service 2019-01-10 10:28:29 -06:00
Brent Cook d686303cff Land #11228, Move msfdb_ws to tools/dev since it is deprecated by msfdb 2019-01-10 09:28:34 -06:00
James Barnett 4074913b60 Dont log every request when using HTTP data service 2019-01-10 00:30:54 -06:00
Matthew Kienow c3f71a1692 Update Rspec expected thread count
When REMOTE_DB is set there is a thread for the web service, in
addition to the External modules thread manager, so there is one or two
threads by the end of the test run in addition to the main VM thread.
2019-01-09 23:56:16 -05:00
Matthew Kienow 8c29319b25 Add session_events method 2019-01-08 14:02:40 -05:00
Matthew Kienow fa783256eb Remove unnecessary argument default value 2019-01-08 14:02:39 -05:00
James Barnett 466b0004e1 Land #11163, add API endpoint for retrieving Mdm::Events 2019-01-08 09:26:53 -06:00
Erin Bleiweiss 6641c606b2 Add support for db import from remote data service 2019-01-07 14:32:27 -06:00
James Barnett 5f43ec0a79 Address code review comment 2019-01-04 15:10:20 -06:00
James Barnett 10cceb0e9b Fix a couple of bugs introduced by symbolizing to_ar 2019-01-04 15:10:20 -06:00
James Barnett bcfe434d1e Update to_ar to use symbolized keys 2019-01-04 15:10:19 -06:00
Matthew Kienow 7e10b38421 Add events method 2018-12-21 21:37:42 -05:00
Matthew Kienow eec7a3dafc Remove debug code 2018-12-14 13:33:16 -05:00
Matthew Kienow ad6b80bd08 Remove unused session_dto flag 2018-12-14 13:01:20 -05:00
Matthew Kienow b6cdf7aa9d Add update_session method 2018-12-14 12:04:55 -05:00
Matthew Kienow a8ed971f12 Move convert_msf_session_to_hash to data proxy 2018-12-14 11:46:12 -05:00
James Barnett 8799c550e1 Parse public and private as correct sub-type 2018-12-04 10:57:54 -06:00
Brent Cook 847e630630 ensure incoming creds are all UTF-8 2018-11-22 09:20:12 -06:00